export declare const GIT_PROTECTION_PREFLIGHT_SCOPE: {
    readonly scanned: readonly ["Git index", "current reachable HEAD history", "non-ignored untracked worktree files"];
    readonly residual: readonly ["other branches", "stashes", "Git LFS object content"];
};
export type GitProtectionLocation = 'index' | 'head-history' | 'untracked-worktree';
export type GitProtectionFinding = {
    /** Repository-relative path. File content is never collected or returned. */
    path: string;
    locations: GitProtectionLocation[];
};
export type GitProtectionPreflightResult = {
    passed: boolean;
    failClosed: boolean;
    findings: GitProtectionFinding[];
    diagnostics: string[];
    scope: typeof GIT_PROTECTION_PREFLIGHT_SCOPE;
};
/**
 * Checks the dependency-free Git surfaces available from the current checkout.
 * Scope is deliberately limited to the index, history reachable from the current
 * HEAD, and non-ignored untracked worktree files. Other branches, stashes, and
 * Git LFS object content are not scanned.
 */
export declare function runGitProtectionPreflight(repositoryRoot: string, protectedPathPatterns: readonly string[]): GitProtectionPreflightResult;